91 matches found
CVE-2026-1899
Summary: The Any Post Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the aps_slider shortcode, affecting all versions up to and including 1.0.4. The root cause is insufficient input sanitization and output escaping on the ‘post_type’ attribute. Impact: Authenti...
WordPress plugin Any Post Slider 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-26823
The Any Post Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aps slider shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on the 'post type' attribute. This makes it possible for authenticated...
CVE-2026-0680
The Real Post Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2026-0680 Real Post Slider Lite <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
The Real Post Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2026-0680
CVE-2026-0680 - Real Post Slider Lite (WordPress) Concrete details: Real Post Slider Lite is affected by a Stored Cross-Site Scripting vulnerability in its settings. The underlying issue is insufficient input sanitization and output escaping. Affected versions are all up to and including 2.4. Exp...
CVE-2026-0680 Real Post Slider Lite <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
The Real Post Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
WordPress plugin Real Post Slider Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2026-2830
The Real Post Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
WordPress Real Post Slider Lite plugin <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting via Settings vulnerability discovered by 0x34rth in WordPress Plugin Real Post Slider Lite versions = 2.4...
CVE-2025-11370
CVE-2025-11370 concerns the Depicter — Popup & Slider Builder plugin for WordPress (versions up to 4.0.7). The vulnerability arises from a missing capability check in RulesAjaxController::store, enabling unauthenticated users to modify popup display settings. Wordfence’s vulnerability entry (and ...
EUVD-2022-44221
Malicious code in bioql PyPI...
EUVD-2024-30587
Malicious code in bioql PyPI...
EUVD-2024-37598
Malicious code in bioql PyPI...
CVE-2025-8481
The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.1.7. This is due to missing or incorrect nonce validation on the bdfeinstallactivaterswpbsonly function. This makes it possible for unauthenticated...
WordPress plugin Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Blog Designer For...
PT-2025-37132
The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.1.7. This is due to missing or incorrect nonce validation on the bdfe install activate rswpbs only function. This makes it possible for...
WordPress Post Slider and Carousel with Widget plugin < 3.2.10 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Post Slider and Carousel with Widget – A Responsive Post Slider versions 3.2.10...
CVE-2025-4567
The Post Slider and Post Carousel with Post Vertical Scrolling Widget WordPress plugin before 3.2.10 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform...
CVE-2025-4567
CVE-2025-4567 : The WordPress plugin Post Slider and Post Carousel with Widget – A Responsive Post Slider (Post Vertical Scrolling Widget) pre-3.2.10 does not validate/escape certain widget options before output, enabling Stored XSS for users with contributor+ privileges. Affected: Post Slider an...